https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-30097.htmlhttps://patchthecve.com/cve/CVE-2023-30097.htmlWed, 17 Jun 2026 05:54:11 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field.https://patchthecve.com/cve/CVE-2023-30096.htmlhttps://patchthecve.com/cve/CVE-2023-30096.htmlWed, 17 Jun 2026 05:54:10 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field.https://patchthecve.com/cve/CVE-2023-30095.htmlhttps://patchthecve.com/cve/CVE-2023-30095.htmlWed, 17 Jun 2026 05:54:10 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field.https://patchthecve.com/cve/CVE-2022-41708.htmlhttps://patchthecve.com/cve/CVE-2022-41708.htmlWed, 17 Jun 2026 05:03:40 +0000MEDIUM 4.3: Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.https://patchthecve.com/cve/CVE-2022-41707.htmlhttps://patchthecve.com/cve/CVE-2022-41707.htmlWed, 17 Jun 2026 05:03:40 +0000MEDIUM 6.5: Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.https://patchthecve.com/cve/CVE-2020-20093.htmlhttps://patchthecve.com/cve/CVE-2020-20093.htmlWed, 17 Jun 2026 03:02:49 +0000MEDIUM 6.5: The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.https://patchthecve.com/cve/CVE-2020-17476.htmlhttps://patchthecve.com/cve/CVE-2020-17476.htmlWed, 17 Jun 2026 02:58:59 +0000MEDIUM 6.1: Mibew Messenger before 3.2.7 allows XSS via a crafted user name.